CVE-2026-82690 D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/vemgr.cgi. This manipulation of the argument fdev causes os command injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-82690

A flaw has been found in D-Link DNS-327L and DNS-340L up to 20260717. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/vemgr.cgi. This manipulation of the argument fdev causes os command injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-57585

A flaw was found in MessagePack for Python, a serializer implementation. This vulnerability, categorized as a Use-After-Free CWE-416, occurs when the Unpacker component is reused after an error. A remote attacker could exploit this by repeatedly providing untrusted input, leading to an...

prowler

Prowler is the Open Cloud Security Platform trusted by thousands to automate security and compliance in any cloud environment. With thousands of ready-to-use checks and compliance frameworks, Prowler delivers real-time, customizable monitoring and seamless integrations, making cloud security...

CVE-2026-82688

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtualvol.cgi of the component Virtual Volume Handler. The manipulation of the argument fsharename/ftarget/fname leads to os command...

CVE-2026-82679

A security flaw has been discovered in diem-project diem up to 5.1.3. The impacted element is an unknown function of the file dmFrontPlugin/lib/dmWidget/media/dmWidgetContentBaseMediaForm.php of the component Widget Editor. Performing a manipulation results in unrestricted upload. The attack may ...

CVE-2026-82680

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /loadfile.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public a...

CVE-2026-82678

A vulnerability was identified in diem-project diem up to 5.1.3. The affected element is the function executeCommand of the file dmAdminPlugin/modules/dmConsole/actions/actions.class.php of the component Administrative Console. Such manipulation of the argument dmcommand leads to os command...

EUVD-2026-68481

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomountmgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can b...

CVE-2026-82689

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomountmgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can b...

CVE-2026-82689 D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection

A vulnerability was detected in D-Link DNS-320L, DNS-327L, DNS-340L and DNS-345 up to 20260717. Affected is an unknown function of the file /cgi-bin/isomountmgr.cgi of the component ISO Image Handler. The manipulation of the argument upIsoRootPath results in os command injection. The attack can b...

BaRMIe

BaRMIe BaRMIe — это инструмент для перечисления и атаки сервисов Java RMI Remote Method Invocation. Сервисы RMI часто предоставляют опасный функционал без надлежащих средств безопасности, однако они часто остаются незамеченными во время оценок безопасности из-за отсутствия эффективных инструменто...

CVE-2025-55182-Attack-Analysis

CVE-2025-55182 공격 분석: React 서버 컴포넌트 RCE 프로덕션 Next.js 애플리케이션에 대한 실제 공격 분석 📋 목차 요약 취약점 개요 공격 타임라인 기술 분석 악성코드 분석 침해 지표IOC 완화 및 대응 교훈 참고 자료 요약 2025년 12월 5일 , 저희 프로덕션 Next.js 애플리케이션이 React Server Components의 치명적인 원격 코드 실행RCE 취약점인 CVE-2025-55182React2Shell를 악용한 공격자의 표적이 되었습니다. 이 공격은 서버에서 Linux 백도어 트로이...

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vulnerability

CVE-2023-46021-Code-Projects-Blood-Bank-1.0-OOB-SQL-Injection-Vulnerability Exploit Author: ersinerenler Vendor Homepage https://code-projects.org/blood-bank-in-php-with-source-code Software Link https://download-media.code-projects.org/2020/11/BloodBankInPHPWithSourcecode.zip Overview...

EUVD-2026-68468

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtualvol.cgi of the component Virtual Volume Handler. The manipulation of the argument fsharename/ftarget/fname leads to os command...

CVE-2026-82688 D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection

A security vulnerability has been detected in D-Link DNS-340L and DNS-345 1.01B04/1.03B06/1.04.B02/1.05b04. This impacts an unknown function of the file /cgi-bin/virtualvol.cgi of the component Virtual Volume Handler. The manipulation of the argument fsharename/ftarget/fname leads to os command...

CVE-2026-82688

D-Link DNS-340L and DNS-345 (firmware 1.01B04, 1.03B06, 1.04B02, 1.05B04) are affected by an OS command injection vulnerability in the Virtual Volume Handler component, specifically in the file /cgi-bin/virtual_vol.cgi. Manipulation of the f_sharename, f_target, or f_name arguments allows remote ...

CVE-2022-1388

CVE-2022-1388 Poc:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url Exp:pocsuite -r CVE-2022-1388F5BIG-IPPOCEXP.py -u url --attack --command command 면책 조항 이 도구는 학습, 연구 및 자체 점검 목적으로만 사용됩니다. 불법적인 목적으로 사용해서는 안 됩니다. 이 도구를 사용하여 발생하는 모든 위험은 저와 무관합니다! 면책 조항 이 도구는 학습, 연구 및 자체 점검 전용입니다. 불법적인 목적으로 사용해서는 안...

EUVD-2026-68461

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /loadfile.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public a...

CVE-2026-82680 D-Link DSM-G600 Multipart load_file.cgi out-of-bounds write

A weakness has been identified in D-Link DSM-G600 1.01. This affects an unknown function of the file /loadfile.cgi of the component Multipart Handler. Executing a manipulation can lead to out-of-bounds write. The attack may be launched remotely. The exploit has been made available to the public a...